method one:
system-view
interface gigabitethernet 1/0/2 (write the corresponding port here)
ip verify source ip-address mac-address
port access vlan 400 (write the corresponding vlan here)
ip source binding ip-address 192.168.0.3 mac-address 0001-0203-0405 (write here the ip+mac that needs to be bound to the terminal)
quit
save f
Method Two:
Arp filter key configuration points:
[SW1]int gi 1/0/1
[SW1-GigabitEthernet1/0/1]arp filter binding 192.168.10.2 5816-a771-0206
[SW1-GigabitEthernet1/0/1]arp filter binding 192.168.10.3 5816-aae1-0306
[SW1-GigabitEthernet1/0/1]quit
Method three:
手动设置端口绑定mac
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 10
combo enable fiber
mac-address static 0ea4-9b61-0206 vlan 10
port-security intrusion-mode disableport-temporarily
port-security ntk-mode ntk-withbroadcasts
port-security max-mac-count 1
port-security port-mode secure
#
interface GigabitEthernet1/0/2
port link-mode bridge
port access vlan 10
combo enable fiber
mac-address static 0ea4-a2b9-0306 vlan 10
port-security intrusion-mode disableport-temporarily
port-security ntk-mode ntk-withbroadcasts
port-security max-mac-count 1
port-security port-mode secure
Verify configuration:
Display IPv4 static binding entries, it can be seen that the above configuration is successful.
<H3C> display ip source binding static